forums.ps2dev.org

bocaJ · Joined: 20 Dec 2007 Posts: 6

I was wondering if anyone has looked at the possibility of reverting back to the old firmware after the 2.1 update. Specifically, I saw mention of this possibility via a DNS hack with this post:

http://forums.ps2dev.org/viewtopic.php?t=7719&highlight=dns

Has anyone been working on this, or is it really something of a pipe dream?

Also, rather than have to look to your servers, would anyone be willing to share the server configuration and pages with us, so we could simply point to local host on the spoofing machine? If we were able to do a downgrade, this would also vastly accelerate the ability to get at the old firmware, and might take some of the load off your servers.

Thanks, sorry for being a bit of a n00b.

jimparis · Joined: 10 Jun 2005 Posts: 1179 Location: Boston

You can forge ps3-updatelist.txt to trick your PS3 into thinking it already has the latest update. The only known way to downgrade is to physically read your flash before you upgrade and then reprogram in to go back.

dkp0h · Joined: 20 Dec 2007 Posts: 3

Hi, i get the new firmware 2.10, and i'm sure i'll can downgrade with each previous versions thanks to my INFECTUS !!!!

INFECTUS let me test all new PS3 features, with possibility of downgrade to the firmware i want....

(Cf. FRENCH POST on INFECTUS.BIZ)

SeeYa !!!!

Frenc TEAM is on your steps....

d!K

dkp0h · Joined: 20 Dec 2007 Posts: 3

ps2devman · Joined: 09 Oct 2006 Posts: 265

The number of people who reported success in dumping/reflashing is very low if we look through various forums. Success in reflashing older firmware is even less reported.

It is possible that possibility of accessing the Nands directly has been predicted by Sony.

People are reporting changes in the firmware every day.

You may even have systematic accesses to the Nands by PS3 (tutorials say to not touch anything in the PS3 dashboard while reading/writing) just to eventually make a parallel direct access to the Nand fail or get corrupted.

From an electronic point of view, there are sill a few mysteries such as problems when PS3 ground cable is plugged...

I think we need more reports from people who found a way to put Nands on sockets first. Reading/Writing nands outside of ps3 will avoid possible annoyance made on purpose or not by PS3 dashboard.

Then we need reports that reflashing older firmware works.

Then we will get more confident.

waynevan2000 · Joined: 13 Nov 2007 Posts: 2

@ dkp0h

How do you access the nands when you have removed the usb port ?

Ps3Rips · Joined: 02 May 2007 Posts: 30

I thought the same thing but then I saw the Red wire.
I'm guessing he has it external of the Ps3 for easy access (no need to open case to flash).

Edit ** actually on checking my chip the USB is on the other edge of the board.

There is no way that chip can be linked to a PC for programming.
Dumping etc.
_________________
Kicking out a bad guy
Beating up a monster
Fighting against evil
I'll rescue this town

cloudhunter · Joined: 17 Aug 2006 Posts: 86

... This was just advertising - everyone already knows that infectious can downgrade if you have a nand image of your PS3 previously.

Cloudy
_________________
:)

dkp0h · Joined: 20 Dec 2007 Posts: 3

Hello guys !!!

So yes, the usb port has been deported outside the ps3 to down/upgrade without open it. We unplug one of the 4 usb ports on the ps3 and we devoted it to INFECTUS Function.

So very usefull and i notice like ps2devman that there is so few reports about such installation.....because we encounter the GROUND problem and we have search for long time....so much mysteries....

SeeYa

d!K

boxbuilder · Joined: 17 Nov 2007 Posts: 15

The firmware and harddrive are encrypted with machine specific keys. I've been trying to figure where those keys are stored. I don't think they are (permanently) in the cell chip. There is a serial number (in the cell), but it is loaded at boot as part of the "configuration ring" which the "system controller" sends to write only registers which only work during boot. This "system controller" sounds like the "super companion chip", the silver chip between the cell, and the nand chips.
My idle speculation is that they probably wouldn't have bothered to put rom on a production chip, so there is likely another nand somewhere which holds the key. After reading up on the "super companion chip", I found a small reference to encryption and random number generation. It makes sense that SCC would handle firmware and harddrive encryption, this would keep the keys out of the cell where they could be copied.
Looking at some motherboard pics, it looks like at least one of the nand chips is connected through a mystery chip (cxd4302gb). It was made "in house", and there doesn't seem to be any data sheets on the chipset, suspicious.

for some good light reading:
Cell BE Hardware Initialization Guide
http://www.chipworks.com/uploadedFiles/Technical_Competitive_Analysis/Capabilities/Sony_Playstation_report%20%282%29.pdf
http://www.ocpip.org/pressroom/Adoption_Stories/SuperCompanionChip_English.pdf
http://www.hotchips.org/archives/hc17/2_Mon/HC17.S1/HC17.S1T3.pdf

or if you prefer pics:
http://images.dailytech.com/nimage/2998_large_io_bridge.jpg
http://media.ps3scene.com/images/PS3-motherboard-PAL/PS3_motherboard_7.JPG
http://media.ps3scene.com/images/PS3-motherboard-PAL/PS3_motherboard_8.JPG

korn16ftl · Joined: 10 Jul 2008 Posts: 21